Password generator
Create a strong random password or an easy-to-remember passphrase, generated entirely in your browser. Nothing you generate here is sent anywhere.
Generated password
Your password
-
- Length
- -
- Possible characters
- -
- Entropy
- -
How it works
A password generator picks characters or words at random from a pool using your browser's cryptographically secure random number generator, so the result cannot be predicted or reproduced.
- Choose password or passphrase
A password mixes characters; a passphrase strings together dictionary words.
- Set the length and character types
Longer and more varied means a bigger pool for an attacker to search.
- Copy it into a password manager
Save it somewhere safe. This page never stores or transmits what it generates.
What the entropy number means
Entropy measures how many attempts a computer guessing at random would need on average to find your password, expressed in bits. Each extra bit doubles the search space:
entropy = log₂(pool size) × length
A 16-character password using all four character types draws from a pool of 88 characters, giving about 103 bits, which this tool rates as very strong. A 5-word passphrase from this tool's 927-word list gives about 49 bits, rated fair on its own, which is why adding a number or an extra word or two pushes it higher.
- Under 36 bits, weak: crackable in a practical amount of time with consumer hardware.
- 36 to 59 bits, fair: reasonable for a low-value, rate-limited account.
- 60 to 79 bits, strong: a solid choice for most accounts.
- 80 bits or more, very strong: effectively unguessable with current technology.
Generated on your device only
Every character and word is chosen in your browser with the Web Crypto API. No password, passphrase, or option you pick is sent to a server, logged, or stored. Reloading this page with your browser offline still generates a password, which you can use to confirm nothing left your device.
Frequently asked questions
How do I create a strong password with this generator?
Keep all four character types on and set the length to at least 16. The entropy number and the status label below the password confirm the strength. Copy the result straight into a password manager rather than typing it, since a longer random password is not meant to be memorized.
Is this password generator safe? Does it send my password anywhere?
Yes. Generation happens entirely in your browser using the Web Crypto API's cryptographically secure random number source. No password, passphrase, or setting is transmitted to a server or stored. You can disconnect from the internet and this tool keeps generating passwords normally.
What is the difference between a password and a passphrase?
A password is a short string of random characters, such as T7mXqP2kLs9vR4w. A passphrase strings together several random dictionary words, such as Forest-Anchor-Whisper-Comet-Violet, which is easier to type and remember while still covering a large search space when it uses enough words. Switch between the two with the Type buttons above.
How long should a password be in 2026?
Security guidance generally recommends at least 16 characters for everyday accounts and 20 or more for high-value accounts such as banking, email, or a password manager's own master password. Longer always beats shorter for a random password, since every extra character multiplies the number of combinations an attacker has to try.
What does excluding ambiguous characters do?
Characters such as the digit 0 and the letter O, or the digit 1, the lowercase letter l, and the uppercase letter I, look almost identical in many fonts. Turning on Exclude ambiguous characters removes them, which makes a password easier to type correctly by hand without meaningfully reducing its strength, since the pool still has 80 or more characters left.